@graphql-hive/federation-gateway-audit 0.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (293) hide show
  1. package/.changeset/@graphql-hive_federation-gateway-audit-293-dependencies.md +5 -0
  2. package/.changeset/README.md +9 -0
  3. package/.changeset/config.json +18 -0
  4. package/.changeset/funky-times-cry.md +5 -0
  5. package/.github/CONTRIBUTING.md +9 -0
  6. package/.github/workflows/ci.yaml +97 -0
  7. package/.github/workflows/release.yml +58 -0
  8. package/LICENSE +21 -0
  9. package/README.md +113 -0
  10. package/REPORT.md +812 -0
  11. package/dist/cli.js +547 -0
  12. package/dist/env-Dj2M4ll3.cjs +15 -0
  13. package/dist/env-j1f_SZtG.js +13 -0
  14. package/dist/env-j1f_SZtG.mjs +13 -0
  15. package/dist/index--3rcSZqA.js +227 -0
  16. package/dist/index-0MDIXUzP.cjs +589 -0
  17. package/dist/index-19eD5lFk.mjs +163 -0
  18. package/dist/index-1ZtG04bN.js +222 -0
  19. package/dist/index-1nZTfbJn.cjs +168 -0
  20. package/dist/index-1smMXABT.mjs +227 -0
  21. package/dist/index-2oy7cA9A.js +225 -0
  22. package/dist/index-3BM15w2Y.mjs +234 -0
  23. package/dist/index-3CyAnc7j.js +234 -0
  24. package/dist/index-4Vj-ND7j.mjs +213 -0
  25. package/dist/index-4swHVe9x.cjs +507 -0
  26. package/dist/index-6itLA31k.js +382 -0
  27. package/dist/index-6qNpP2wc.mjs +238 -0
  28. package/dist/index-81CiuWlP.mjs +333 -0
  29. package/dist/index-8FxjbyOU.cjs +236 -0
  30. package/dist/index-A2YbwKzc.mjs +288 -0
  31. package/dist/index-B-YHHt9g.js +333 -0
  32. package/dist/index-B0coRevy.mjs +337 -0
  33. package/dist/index-B1NAc0TI.cjs +215 -0
  34. package/dist/index-B1WvIzTg.js +371 -0
  35. package/dist/index-B38OpRtf.js +166 -0
  36. package/dist/index-B3aDw4Tt.js +359 -0
  37. package/dist/index-B55AdoQy.js +273 -0
  38. package/dist/index-B7cr8XE-.js +194 -0
  39. package/dist/index-B7zN3YzE.cjs +683 -0
  40. package/dist/index-B8X923W3.mjs +262 -0
  41. package/dist/index-B958BFYC.cjs +224 -0
  42. package/dist/index-B9T896rB.mjs +163 -0
  43. package/dist/index-BA3ERnyq.mjs +234 -0
  44. package/dist/index-BDMi6sOm.cjs +252 -0
  45. package/dist/index-BDNWXFb_.mjs +304 -0
  46. package/dist/index-BEMScD_X.cjs +173 -0
  47. package/dist/index-BF0H5kP0.cjs +384 -0
  48. package/dist/index-BGC0_vWj.cjs +335 -0
  49. package/dist/index-BGNmWPAk.js +381 -0
  50. package/dist/index-BGUm947D.cjs +229 -0
  51. package/dist/index-BJB0tRA1.js +550 -0
  52. package/dist/index-BKcwbRZx.cjs +339 -0
  53. package/dist/index-BKpVb_h9.cjs +236 -0
  54. package/dist/index-BPFol6Ww.mjs +129 -0
  55. package/dist/index-BPza8i2Q.mjs +213 -0
  56. package/dist/index-BQQgQaGz.cjs +552 -0
  57. package/dist/index-BReFIfq_.cjs +361 -0
  58. package/dist/index-BS7JyQSU.js +250 -0
  59. package/dist/index-BSWSgZCO.cjs +252 -0
  60. package/dist/index-BStXx4OK.js +705 -0
  61. package/dist/index-BSwOAvti.js +288 -0
  62. package/dist/index-BWO8QbMB.mjs +587 -0
  63. package/dist/index-BYEdADrG.cjs +227 -0
  64. package/dist/index-B_eGT6oX.js +225 -0
  65. package/dist/index-B_u5Boud.js +333 -0
  66. package/dist/index-BaH3FI9i.cjs +361 -0
  67. package/dist/index-BaluTf1I.cjs +707 -0
  68. package/dist/index-BblYlZ3A.cjs +131 -0
  69. package/dist/index-BcZC0OIN.js +234 -0
  70. package/dist/index-Bcjyyjhh.mjs +259 -0
  71. package/dist/index-BcoW0aPo.cjs +165 -0
  72. package/dist/index-BdNZKlDU.js +284 -0
  73. package/dist/index-Bf81cAA1.mjs +444 -0
  74. package/dist/index-Bg3H3fgZ.js +259 -0
  75. package/dist/index-Bgl_1Y6Q.mjs +681 -0
  76. package/dist/index-BgmItHIB.mjs +129 -0
  77. package/dist/index-BgryMCqm.mjs +213 -0
  78. package/dist/index-Bh6a3eXK.mjs +227 -0
  79. package/dist/index-BhPDIfmU.js +304 -0
  80. package/dist/index-BiTzMTFn.js +304 -0
  81. package/dist/index-BjbmOyBP.cjs +215 -0
  82. package/dist/index-BjwZX2iS.mjs +273 -0
  83. package/dist/index-Bm8hqSRd.cjs +168 -0
  84. package/dist/index-BmOn6xYL.js +228 -0
  85. package/dist/index-BmQrhPXB.cjs +131 -0
  86. package/dist/index-Bnb8TpOO.js +280 -0
  87. package/dist/index-BndUB2KV.mjs +381 -0
  88. package/dist/index-Bo74nI4n.js +129 -0
  89. package/dist/index-BoGmP6Cy.cjs +230 -0
  90. package/dist/index-BodMjESw.mjs +250 -0
  91. package/dist/index-BpJZCoVH.mjs +250 -0
  92. package/dist/index-Br-Y1qC_.cjs +446 -0
  93. package/dist/index-BrFtcRgi.mjs +194 -0
  94. package/dist/index-BsPxDJAB.mjs +238 -0
  95. package/dist/index-Bu7pZnPO.cjs +170 -0
  96. package/dist/index-Bu8SXnTf.mjs +227 -0
  97. package/dist/index-BuNNRp3W.mjs +117 -0
  98. package/dist/index-Bwh8HVkw.cjs +384 -0
  99. package/dist/index-BxK3Y72_.js +227 -0
  100. package/dist/index-BxPUzymh.cjs +208 -0
  101. package/dist/index-ByUUB7Zn.js +250 -0
  102. package/dist/index-ByUr80PD.cjs +306 -0
  103. package/dist/index-ByZa9qm8.mjs +273 -0
  104. package/dist/index-BzPCjhuQ.cjs +264 -0
  105. package/dist/index-Bz_LTy1A.mjs +222 -0
  106. package/dist/index-C05_HMLC.js +225 -0
  107. package/dist/index-C15P-_1j.cjs +229 -0
  108. package/dist/index-C1GgHOiD.js +228 -0
  109. package/dist/index-C4Pk-zTm.mjs +227 -0
  110. package/dist/index-C4dnTlBf.js +262 -0
  111. package/dist/index-C6LW00iX.mjs +505 -0
  112. package/dist/index-C6nkQ480.js +225 -0
  113. package/dist/index-C8Mu4K9Q.cjs +383 -0
  114. package/dist/index-C8mB7yWC.mjs +288 -0
  115. package/dist/index-C9Eh7qBC.js +273 -0
  116. package/dist/index-CAJ9YPxc.js +681 -0
  117. package/dist/index-CD03pVUt.cjs +373 -0
  118. package/dist/index-CD8GiuIg.js +227 -0
  119. package/dist/index-CHB_0VqK.mjs +333 -0
  120. package/dist/index-CKEgb_R7.cjs +215 -0
  121. package/dist/index-CLsasg69.js +228 -0
  122. package/dist/index-CMdC_Cah.js +213 -0
  123. package/dist/index-CNOcqGKC.cjs +227 -0
  124. package/dist/index-CNvZCDZa.js +166 -0
  125. package/dist/index-CO0GiXGE.js +168 -0
  126. package/dist/index-COGhiFjk.mjs +284 -0
  127. package/dist/index-COIlelpZ.mjs +262 -0
  128. package/dist/index-CPph-RFN.mjs +168 -0
  129. package/dist/index-CPu_XkjY.mjs +304 -0
  130. package/dist/index-CQ5t4ZXm.js +117 -0
  131. package/dist/index-CQeQ1nto.js +681 -0
  132. package/dist/index-CSc_T8Lu.js +218 -0
  133. package/dist/index-CUFKuE64.js +550 -0
  134. package/dist/index-CW8h3l6M.js +262 -0
  135. package/dist/index-CWrng7Hd.mjs +550 -0
  136. package/dist/index-CWuObqnS.mjs +587 -0
  137. package/dist/index-CX7-wc6X.cjs +1837 -0
  138. package/dist/index-CXviN8qZ.cjs +224 -0
  139. package/dist/index-CY9mowWW.mjs +705 -0
  140. package/dist/index-C_pTgB_1.js +194 -0
  141. package/dist/index-C_qaNb-X.mjs +225 -0
  142. package/dist/index-Ca0FeU7u.js +505 -0
  143. package/dist/index-Cb3ImEjd.cjs +165 -0
  144. package/dist/index-Cbhvi8yk.cjs +229 -0
  145. package/dist/index-Cc3vrs6_.mjs +228 -0
  146. package/dist/index-CcIXvx40.mjs +171 -0
  147. package/dist/index-CdaeeF3f.cjs +306 -0
  148. package/dist/index-CddVoIp2.js +213 -0
  149. package/dist/index-CeiRxGcN.mjs +218 -0
  150. package/dist/index-ChefKWWr.mjs +381 -0
  151. package/dist/index-Cj2ocjXI.cjs +227 -0
  152. package/dist/index-CkWEXzTN.js +129 -0
  153. package/dist/index-Ckhb9QAu.cjs +264 -0
  154. package/dist/index-CklJfQlf.cjs +220 -0
  155. package/dist/index-Cmh7PJUd.mjs +372 -0
  156. package/dist/index-Cn0ZJkAv.mjs +280 -0
  157. package/dist/index-CqTzarV1.mjs +198 -0
  158. package/dist/index-CrUbbFxE.js +284 -0
  159. package/dist/index-CsKaFB2K.mjs +228 -0
  160. package/dist/index-Cu8Ii5r7.cjs +335 -0
  161. package/dist/index-Cuw9ylL-.mjs +371 -0
  162. package/dist/index-CwOULUAt.mjs +382 -0
  163. package/dist/index-CyVnRqjE.cjs +196 -0
  164. package/dist/index-D-1dDKiZ.mjs +227 -0
  165. package/dist/index-D00bnaJy.cjs +220 -0
  166. package/dist/index-D07xiOJ6.cjs +446 -0
  167. package/dist/index-D1Ip6ro6.js +458 -0
  168. package/dist/index-D1Ymvd2b.cjs +286 -0
  169. package/dist/index-D5jOBT3f.cjs +240 -0
  170. package/dist/index-D5tEp8IU.js +337 -0
  171. package/dist/index-D7WuGKYY.cjs +227 -0
  172. package/dist/index-D8Dp6TnQ.cjs +1837 -0
  173. package/dist/index-D9OKpqgG.js +381 -0
  174. package/dist/index-DBMI2EcB.cjs +170 -0
  175. package/dist/index-DBRUKV0U.mjs +225 -0
  176. package/dist/index-DEvExC5x.cjs +119 -0
  177. package/dist/index-DEzxU_gQ.cjs +507 -0
  178. package/dist/index-DFypMD6R.cjs +261 -0
  179. package/dist/index-DHRqE92a.cjs +290 -0
  180. package/dist/index-DISym5OL.js +198 -0
  181. package/dist/index-DJ3ndv3i.mjs +705 -0
  182. package/dist/index-DJXP-Gmp.js +218 -0
  183. package/dist/index-DJlXDQOY.cjs +200 -0
  184. package/dist/index-DLW4GEJl.cjs +229 -0
  185. package/dist/index-DLu9E2Vq.js +238 -0
  186. package/dist/index-DM4ddIL6.js +382 -0
  187. package/dist/index-DMgHLbwU.cjs +339 -0
  188. package/dist/index-DN-ScBql.mjs +458 -0
  189. package/dist/index-DOkkIHER.js +163 -0
  190. package/dist/index-DRY8sDun.cjs +165 -0
  191. package/dist/index-DS3cjugP.mjs +171 -0
  192. package/dist/index-DS86eFsI.mjs +1835 -0
  193. package/dist/index-DUlT8CJ2.js +458 -0
  194. package/dist/index-DV1F4nxP.js +372 -0
  195. package/dist/index-DXsAcJ-o.mjs +359 -0
  196. package/dist/index-DZws2w4w.cjs +229 -0
  197. package/dist/index-D_HiVe2_.cjs +200 -0
  198. package/dist/index-Da6L5V_Z.mjs +681 -0
  199. package/dist/index-Dbb-jnWf.js +206 -0
  200. package/dist/index-DdXy_-T9.js +444 -0
  201. package/dist/index-DddNFRG3.js +337 -0
  202. package/dist/index-DejhKwvw.cjs +173 -0
  203. package/dist/index-DfBdD-5Z.cjs +383 -0
  204. package/dist/index-Df_KCbC4.mjs +213 -0
  205. package/dist/index-DiDq1sL6.cjs +240 -0
  206. package/dist/index-DiuJQ9Mq.js +198 -0
  207. package/dist/index-Djqj3DWJ.js +171 -0
  208. package/dist/index-Dk0q-ENv.mjs +166 -0
  209. package/dist/index-DlFElztE.mjs +163 -0
  210. package/dist/index-DlkxQ-B5.mjs +359 -0
  211. package/dist/index-Dm5kpK9t.js +227 -0
  212. package/dist/index-Dp8mobro.js +444 -0
  213. package/dist/index-DpBWZa1x.cjs +683 -0
  214. package/dist/index-DrkXuLUZ.js +227 -0
  215. package/dist/index-Dsq1FK90.cjs +275 -0
  216. package/dist/index-DtmhGgM8.cjs +282 -0
  217. package/dist/index-Du5MxO_2.mjs +505 -0
  218. package/dist/index-DveYQLCZ.cjs +460 -0
  219. package/dist/index-DxHMqS-W.js +117 -0
  220. package/dist/index-DyTApTHI.cjs +282 -0
  221. package/dist/index-DyTSkAm4.cjs +208 -0
  222. package/dist/index-DygJOEne.mjs +550 -0
  223. package/dist/index-DzAewrkw.js +238 -0
  224. package/dist/index-ESWdD7ek.cjs +215 -0
  225. package/dist/index-EuKHpnHv.mjs +117 -0
  226. package/dist/index-F1A7LMlw.mjs +228 -0
  227. package/dist/index-FP6hvgSw.cjs +552 -0
  228. package/dist/index-GDSrKnPp.mjs +198 -0
  229. package/dist/index-GMCZo-KH.js +222 -0
  230. package/dist/index-IQJLr7nR.js +288 -0
  231. package/dist/index-IawHHRZX.mjs +206 -0
  232. package/dist/index-Jk7MG7tE.cjs +286 -0
  233. package/dist/index-JtGxTXPr.mjs +337 -0
  234. package/dist/index-KAC20a9r.js +359 -0
  235. package/dist/index-LVWQqV-v.js +163 -0
  236. package/dist/index-Ls2fI7y4.js +163 -0
  237. package/dist/index-NB1VDvjW.cjs +374 -0
  238. package/dist/index-NIEZaRYg.cjs +261 -0
  239. package/dist/index-PQXUx1ZR.mjs +1835 -0
  240. package/dist/index-PyaLRKuk.mjs +168 -0
  241. package/dist/index-QQGo-BV1.mjs +444 -0
  242. package/dist/index-QXYDkAsQ.cjs +119 -0
  243. package/dist/index-SmEIf5jz.mjs +259 -0
  244. package/dist/index-UJhFwnD_.mjs +284 -0
  245. package/dist/index-UVyXzNlG.js +705 -0
  246. package/dist/index-UgyHGpUU.mjs +163 -0
  247. package/dist/index-UhQiJabs.cjs +707 -0
  248. package/dist/index-VvuhRvnC.mjs +218 -0
  249. package/dist/index-WPXuueaq.mjs +194 -0
  250. package/dist/index-X4u6bs58.js +259 -0
  251. package/dist/index-XZiO6uje.cjs +275 -0
  252. package/dist/index-YOlsBREZ.cjs +230 -0
  253. package/dist/index-Ytb942t9.js +587 -0
  254. package/dist/index-_2dg_MWu.cjs +460 -0
  255. package/dist/index-eFEW10em.js +213 -0
  256. package/dist/index-eq8bbEej.mjs +225 -0
  257. package/dist/index-f7FiDQMk.js +171 -0
  258. package/dist/index-fBzI1kbw.mjs +225 -0
  259. package/dist/index-fdDnq3vQ.js +163 -0
  260. package/dist/index-fqmAgjhG.js +206 -0
  261. package/dist/index-ikGyewP-.cjs +165 -0
  262. package/dist/index-jft-1bQ6.cjs +230 -0
  263. package/dist/index-l8e8ip4U.js +168 -0
  264. package/dist/index-lkBiml03.js +1835 -0
  265. package/dist/index-mm-YMeoi.js +505 -0
  266. package/dist/index-o7g3iua7.cjs +290 -0
  267. package/dist/index-ojnncNWd.js +587 -0
  268. package/dist/index-q9SCjCJM.mjs +280 -0
  269. package/dist/index-rn-_7-wp.cjs +196 -0
  270. package/dist/index-s27DHpTG.js +1835 -0
  271. package/dist/index-s2HuXM4d.mjs +206 -0
  272. package/dist/index-sbc7nDv3.js +213 -0
  273. package/dist/index-tx0X6vuE.mjs +222 -0
  274. package/dist/index-uCwv2hr-.mjs +166 -0
  275. package/dist/index-vHngHSlz.js +280 -0
  276. package/dist/index-xOtG5E4u.cjs +589 -0
  277. package/dist/index-zJk-Nm6b.mjs +458 -0
  278. package/dist/index-zqxgDrLR.mjs +382 -0
  279. package/dist/index.cjs +233 -0
  280. package/dist/index.d.cts +9 -0
  281. package/dist/index.d.cts.map +1 -0
  282. package/dist/index.d.ts +9 -0
  283. package/dist/index.d.ts.map +1 -0
  284. package/dist/index.js +230 -0
  285. package/dist/index.mjs +230 -0
  286. package/dist/testkit-BtZjdl4n.js +269 -0
  287. package/dist/testkit-BtZjdl4n.mjs +269 -0
  288. package/dist/testkit-C920qivh.js +281 -0
  289. package/dist/testkit-C920qivh.mjs +281 -0
  290. package/dist/testkit-CAf-AsDy.cjs +273 -0
  291. package/dist/testkit-D0rTQ6MD.cjs +286 -0
  292. package/makefile +47 -0
  293. package/package.json +89 -0
@@ -0,0 +1,273 @@
1
+ 'use strict';
2
+
3
+ var composition = require('@apollo/composition');
4
+ var graphql = require('graphql');
5
+ var fets = require('fets');
6
+ var subgraph = require('@apollo/subgraph');
7
+ var graphqlYoga = require('graphql-yoga');
8
+
9
+ function getSupergraph(subgraphs) {
10
+ const result = composition.composeServices(
11
+ subgraphs.map((subgraph) => ({
12
+ name: subgraph.name,
13
+ typeDefs: graphql.parse(subgraph.typeDefs),
14
+ url: subgraph.url
15
+ }))
16
+ );
17
+ if (!result.supergraphSdl) {
18
+ result.errors?.forEach((error) => console.error(error.message));
19
+ throw new Error("Failed to compose supergraph");
20
+ }
21
+ return result.supergraphSdl;
22
+ }
23
+ function serve(id, subgraphs, tests) {
24
+ return {
25
+ id,
26
+ createRoutes(router) {
27
+ let subgraphNames = /* @__PURE__ */ new Set();
28
+ for (const subgraph of subgraphs) {
29
+ if (subgraphNames.has(subgraph.name)) {
30
+ throw new Error(`Duplicate subgraph name ${subgraph.name}`);
31
+ }
32
+ subgraphNames.add(subgraph.name);
33
+ subgraph.createRoutes(id, router);
34
+ }
35
+ function serveSupergraph(request) {
36
+ const supergraph = getSupergraph(
37
+ subgraphs.map((subgraph) => ({
38
+ name: subgraph.name,
39
+ typeDefs: subgraph.typeDefs,
40
+ url: `${request.parsedUrl.origin}/${id}/${subgraph.name}`
41
+ }))
42
+ );
43
+ const response = new fets.Response(supergraph, {
44
+ status: 200,
45
+ headers: {
46
+ "Content-Type": "text/plain",
47
+ "Cache-Control": "public, max-age=604800, stale-while-revalidate=432000"
48
+ }
49
+ });
50
+ return response;
51
+ }
52
+ router.route({
53
+ method: "GET",
54
+ path: `/${id}/supergraph`,
55
+ tags: [id],
56
+ description: "Supergraph SDL endpoint",
57
+ operationId: "supergraph",
58
+ schemas: {
59
+ responses: {
60
+ 200: {
61
+ type: "string"
62
+ }
63
+ }
64
+ },
65
+ handler(req) {
66
+ return serveSupergraph(req);
67
+ }
68
+ });
69
+ router.route({
70
+ method: "GET",
71
+ path: `/${id}/supergraph.graphql`,
72
+ tags: [id],
73
+ description: "Supergraph SDL endpoint",
74
+ operationId: "supergraph.graphql",
75
+ schemas: {
76
+ responses: {
77
+ 200: {
78
+ type: "string"
79
+ }
80
+ }
81
+ },
82
+ handler(req) {
83
+ return serveSupergraph(req);
84
+ }
85
+ });
86
+ router.route({
87
+ method: "GET",
88
+ path: `/${id}/subgraphs`,
89
+ tags: [id],
90
+ description: "A list of subgraphs with their SDLs, URLs and names",
91
+ operationId: "subgraphs",
92
+ schemas: {
93
+ responses: {
94
+ 200: {
95
+ type: "array",
96
+ items: {
97
+ type: "object",
98
+ properties: {
99
+ name: { type: "string" },
100
+ url: { type: "string" },
101
+ sdl: { type: "string" }
102
+ },
103
+ required: ["name", "url", "sdl"]
104
+ }
105
+ }
106
+ }
107
+ },
108
+ handler(req) {
109
+ return fets.Response.json(
110
+ subgraphs.map((subgraph) => ({
111
+ name: subgraph.name,
112
+ sdl: subgraph.typeDefs,
113
+ url: `${req.parsedUrl.origin}/${id}/${subgraph.name}`
114
+ }))
115
+ );
116
+ }
117
+ });
118
+ router.route({
119
+ method: "GET",
120
+ path: `/${id}/tests`,
121
+ tags: [id],
122
+ description: "Endpoint with a list of tests",
123
+ operationId: "tests",
124
+ schemas: {
125
+ responses: {
126
+ 200: {
127
+ type: "array",
128
+ items: {
129
+ type: "object",
130
+ properties: {
131
+ query: { type: "string" },
132
+ expected: {
133
+ type: "object",
134
+ properties: {
135
+ data: {
136
+ anyOf: [
137
+ { type: "object" },
138
+ {
139
+ type: "null"
140
+ }
141
+ ]
142
+ },
143
+ errors: {
144
+ type: "boolean",
145
+ description: "Indicates that errors are expected",
146
+ default: false
147
+ }
148
+ },
149
+ additionalProperties: false
150
+ }
151
+ },
152
+ additionalProperties: false,
153
+ required: ["query", "expected"]
154
+ }
155
+ }
156
+ }
157
+ },
158
+ handler() {
159
+ const testsArray = Array.isArray(tests) ? tests : tests();
160
+ return fets.Response.json(testsArray);
161
+ }
162
+ });
163
+ return id;
164
+ }
165
+ };
166
+ }
167
+
168
+ function createSubgraph(name, schemaParameters) {
169
+ let schema;
170
+ function lazySchema() {
171
+ if (!schema) {
172
+ schema = subgraph.buildSubgraphSchema({
173
+ typeDefs: graphql.parse(schemaParameters.typeDefs),
174
+ resolvers: schemaParameters.resolvers
175
+ });
176
+ }
177
+ return schema;
178
+ }
179
+ function lazyYoga() {
180
+ if (!yoga) {
181
+ yoga = graphqlYoga.createYoga({
182
+ schema: lazySchema(),
183
+ graphqlEndpoint: "*",
184
+ logging: false,
185
+ maskedErrors: false
186
+ });
187
+ }
188
+ return yoga;
189
+ }
190
+ let yoga;
191
+ return {
192
+ createRoutes(testCaseId, router) {
193
+ router.route({
194
+ method: "GET",
195
+ path: `/${testCaseId}/${name}`,
196
+ tags: [testCaseId],
197
+ operationId: "GraphiQL",
198
+ schemas: {
199
+ request: {
200
+ query: {
201
+ type: "object",
202
+ properties: {
203
+ query: { type: "string" }
204
+ },
205
+ additionalProperties: true,
206
+ required: ["query"]
207
+ }
208
+ }
209
+ },
210
+ handler(req) {
211
+ return lazyYoga()(req);
212
+ }
213
+ });
214
+ router.route({
215
+ method: "POST",
216
+ path: `/${testCaseId}/${name}`,
217
+ tags: [testCaseId],
218
+ operationId: `"${name}" subgraph`,
219
+ description: "GraphQL endpoint for the subgraph",
220
+ schemas: {
221
+ request: {
222
+ json: {
223
+ type: "object",
224
+ properties: {
225
+ query: { type: "string" },
226
+ variables: { type: "object" }
227
+ },
228
+ additionalProperties: true,
229
+ required: ["query"]
230
+ }
231
+ },
232
+ responses: {
233
+ 200: {
234
+ type: "object",
235
+ properties: {
236
+ data: { type: "object" },
237
+ errors: {
238
+ type: "array",
239
+ items: {
240
+ type: "object",
241
+ properties: {
242
+ message: { type: "string" }
243
+ },
244
+ required: ["message"],
245
+ additionalProperties: false
246
+ }
247
+ }
248
+ },
249
+ required: ["data"],
250
+ additionalProperties: false
251
+ }
252
+ }
253
+ },
254
+ handler(req) {
255
+ return lazyYoga()(req);
256
+ }
257
+ });
258
+ },
259
+ name,
260
+ typeDefs: schemaParameters.typeDefs
261
+ };
262
+ }
263
+
264
+ function createTest(query, expected) {
265
+ return {
266
+ query,
267
+ expected
268
+ };
269
+ }
270
+
271
+ exports.createSubgraph = createSubgraph;
272
+ exports.createTest = createTest;
273
+ exports.serve = serve;
@@ -0,0 +1,286 @@
1
+ 'use strict';
2
+
3
+ var composition = require('@apollo/composition');
4
+ var graphql = require('graphql');
5
+ var fets = require('fets');
6
+ var subgraph = require('@apollo/subgraph');
7
+ var graphqlYoga = require('graphql-yoga');
8
+
9
+ function getSupergraph(subgraphs) {
10
+ const result = composition.composeServices(
11
+ subgraphs.map((subgraph) => ({
12
+ name: subgraph.name,
13
+ typeDefs: graphql.parse(subgraph.typeDefs),
14
+ url: subgraph.url
15
+ }))
16
+ );
17
+ if (!result.supergraphSdl) {
18
+ result.errors?.forEach((error) => console.error(error.message));
19
+ throw new Error("Failed to compose supergraph");
20
+ }
21
+ return result.supergraphSdl;
22
+ }
23
+ function serve(id, subgraphs, tests) {
24
+ return {
25
+ id,
26
+ createRoutes(router) {
27
+ let subgraphNames = /* @__PURE__ */ new Set();
28
+ for (const subgraph of subgraphs) {
29
+ if (subgraphNames.has(subgraph.name)) {
30
+ throw new Error(`Duplicate subgraph name ${subgraph.name}`);
31
+ }
32
+ subgraphNames.add(subgraph.name);
33
+ subgraph.createRoutes(id, router);
34
+ }
35
+ function serveSupergraph(request) {
36
+ const supergraph = getSupergraph(
37
+ subgraphs.map((subgraph) => ({
38
+ name: subgraph.name,
39
+ typeDefs: subgraph.typeDefs,
40
+ url: `${request.parsedUrl.origin}/${id}/${subgraph.name}`
41
+ }))
42
+ );
43
+ const response = new fets.Response(supergraph, {
44
+ status: 200,
45
+ headers: {
46
+ "Content-Type": "text/plain",
47
+ "Cache-Control": "public, max-age=604800, stale-while-revalidate=432000"
48
+ }
49
+ });
50
+ return response;
51
+ }
52
+ router.route({
53
+ method: "GET",
54
+ path: `/${id}/supergraph`,
55
+ tags: [id],
56
+ description: "Supergraph SDL endpoint",
57
+ operationId: "supergraph",
58
+ schemas: {
59
+ responses: {
60
+ 200: {
61
+ type: "string"
62
+ }
63
+ }
64
+ },
65
+ handler(req) {
66
+ return serveSupergraph(req);
67
+ }
68
+ });
69
+ router.route({
70
+ method: "GET",
71
+ path: `/${id}/supergraph.graphql`,
72
+ tags: [id],
73
+ description: "Supergraph SDL endpoint",
74
+ operationId: "supergraph.graphql",
75
+ schemas: {
76
+ responses: {
77
+ 200: {
78
+ type: "string"
79
+ }
80
+ }
81
+ },
82
+ handler(req) {
83
+ return serveSupergraph(req);
84
+ }
85
+ });
86
+ router.route({
87
+ method: "GET",
88
+ path: `/${id}/subgraphs`,
89
+ tags: [id],
90
+ description: "A list of subgraphs with their SDLs, URLs and names",
91
+ operationId: "subgraphs",
92
+ schemas: {
93
+ responses: {
94
+ 200: {
95
+ type: "array",
96
+ items: {
97
+ type: "object",
98
+ properties: {
99
+ name: { type: "string" },
100
+ url: { type: "string" },
101
+ sdl: { type: "string" }
102
+ },
103
+ required: ["name", "url", "sdl"]
104
+ }
105
+ }
106
+ }
107
+ },
108
+ handler(req) {
109
+ return fets.Response.json(
110
+ subgraphs.map((subgraph) => ({
111
+ name: subgraph.name,
112
+ sdl: subgraph.typeDefs,
113
+ url: `${req.parsedUrl.origin}/${id}/${subgraph.name}`
114
+ }))
115
+ );
116
+ }
117
+ });
118
+ router.route({
119
+ method: "GET",
120
+ path: `/${id}/tests`,
121
+ tags: [id],
122
+ description: "Endpoint with a list of tests",
123
+ operationId: "tests",
124
+ schemas: {
125
+ responses: {
126
+ 200: {
127
+ type: "array",
128
+ items: {
129
+ type: "object",
130
+ properties: {
131
+ query: { type: "string" },
132
+ expected: {
133
+ type: "object",
134
+ properties: {
135
+ data: {
136
+ anyOf: [
137
+ { type: "object" },
138
+ {
139
+ type: "null"
140
+ }
141
+ ]
142
+ },
143
+ errors: {
144
+ type: "boolean",
145
+ description: "Indicates that errors are expected",
146
+ default: false
147
+ }
148
+ },
149
+ additionalProperties: false
150
+ }
151
+ },
152
+ additionalProperties: false,
153
+ required: ["query", "expected"]
154
+ }
155
+ }
156
+ }
157
+ },
158
+ handler() {
159
+ const testsArray = Array.isArray(tests) ? tests : tests();
160
+ return fets.Response.json(testsArray);
161
+ }
162
+ });
163
+ return id;
164
+ }
165
+ };
166
+ }
167
+
168
+ try {
169
+ process.loadEnvFile();
170
+ } catch (e) {
171
+ }
172
+ const env = {
173
+ PUNISH_FOR_POOR_PLANS: "1",
174
+ ...process.env
175
+ };
176
+ function shouldPunishForPoorPlans(context) {
177
+ return context.env.PUNISH_FOR_POOR_PLANS === "1";
178
+ }
179
+
180
+ function createSubgraph(name, schemaParameters) {
181
+ let schema;
182
+ function lazySchema() {
183
+ if (!schema) {
184
+ schema = subgraph.buildSubgraphSchema({
185
+ typeDefs: graphql.parse(schemaParameters.typeDefs),
186
+ resolvers: schemaParameters.resolvers
187
+ });
188
+ }
189
+ return schema;
190
+ }
191
+ function lazyYoga() {
192
+ if (!yoga) {
193
+ yoga = graphqlYoga.createYoga({
194
+ schema: lazySchema(),
195
+ graphqlEndpoint: "*",
196
+ logging: false,
197
+ maskedErrors: false
198
+ });
199
+ }
200
+ return yoga;
201
+ }
202
+ let yoga;
203
+ return {
204
+ createRoutes(testCaseId, router) {
205
+ router.route({
206
+ method: "GET",
207
+ path: `/${testCaseId}/${name}`,
208
+ tags: [testCaseId],
209
+ operationId: "GraphiQL",
210
+ schemas: {
211
+ request: {
212
+ query: {
213
+ type: "object",
214
+ properties: {
215
+ query: { type: "string" }
216
+ },
217
+ additionalProperties: true,
218
+ required: ["query"]
219
+ }
220
+ }
221
+ },
222
+ handler(req) {
223
+ return lazyYoga()(req, { env });
224
+ }
225
+ });
226
+ router.route({
227
+ method: "POST",
228
+ path: `/${testCaseId}/${name}`,
229
+ tags: [testCaseId],
230
+ operationId: `"${name}" subgraph`,
231
+ description: "GraphQL endpoint for the subgraph",
232
+ schemas: {
233
+ request: {
234
+ json: {
235
+ type: "object",
236
+ properties: {
237
+ query: { type: "string" },
238
+ variables: { type: "object" }
239
+ },
240
+ additionalProperties: true,
241
+ required: ["query"]
242
+ }
243
+ },
244
+ responses: {
245
+ 200: {
246
+ type: "object",
247
+ properties: {
248
+ data: { type: "object" },
249
+ errors: {
250
+ type: "array",
251
+ items: {
252
+ type: "object",
253
+ properties: {
254
+ message: { type: "string" }
255
+ },
256
+ required: ["message"],
257
+ additionalProperties: false
258
+ }
259
+ }
260
+ },
261
+ required: ["data"],
262
+ additionalProperties: false
263
+ }
264
+ }
265
+ },
266
+ handler(req) {
267
+ return lazyYoga()(req, { env });
268
+ }
269
+ });
270
+ },
271
+ name,
272
+ typeDefs: schemaParameters.typeDefs
273
+ };
274
+ }
275
+
276
+ function createTest(query, expected) {
277
+ return {
278
+ query,
279
+ expected
280
+ };
281
+ }
282
+
283
+ exports.createSubgraph = createSubgraph;
284
+ exports.createTest = createTest;
285
+ exports.serve = serve;
286
+ exports.shouldPunishForPoorPlans = shouldPunishForPoorPlans;
package/makefile ADDED
@@ -0,0 +1,47 @@
1
+ BASE_URL := $(or $(BASE_URL), "http://localhost:4200")
2
+ TEST_SUITE := $(or $(TEST_SUITE), "")
3
+ REPORTER := $(or $(REPORTER), "dot")
4
+ GATEWAYS_DIR := $(wildcard ./gateways/*)
5
+ GATEWAY_IDS := $(notdir $(GATEWAYS_DIR))
6
+
7
+ define TEST_GATEWAY
8
+ test-$(1):
9
+ npm start -- test --cwd ./gateways/$(1) --run-script ./run.sh --reporter $(REPORTER) --graphql $(shell jq -r .graphql ./gateways/$(1)/gateway.json) --healthcheck $(shell jq -r .health ./gateways/$(1)/gateway.json)
10
+ endef
11
+
12
+ define TEST_SUITE_GATEWAY
13
+ test-suite-$(1):
14
+ npm start -- test-suite --test $(TEST_SUITE) --cwd ./gateways/$(1) --run-script ./run.sh --graphql $(shell jq -r .graphql ./gateways/$(1)/gateway.json) --healthcheck $(shell jq -r .health ./gateways/$(1)/gateway.json)
15
+ endef
16
+
17
+ define RUN_GATEWAY
18
+ run-$(1):
19
+ npm start -- start --test $(TEST_SUITE) --cwd ./gateways/$(1) --run-script ./run.sh --graphql $(shell jq -r .graphql ./gateways/$(1)/gateway.json) --healthcheck $(shell jq -r .health ./gateways/$(1)/gateway.json)
20
+ endef
21
+
22
+ # Install all dependencies of the project and the gateways
23
+ install:
24
+ npm install
25
+ @for dir in ./gateways/*; do \
26
+ if [ -d $$dir ]; then \
27
+ echo "Installing $$dir"; \
28
+ (cd $$dir && ./install.sh); \
29
+ echo "\n"; \
30
+ fi; \
31
+ done
32
+
33
+ # Start only the subgraphs, no gateway
34
+ subgraphs:
35
+ npm start -- serve
36
+
37
+ # Generate the test and run targets for each gateway
38
+ $(foreach gateway,$(GATEWAY_IDS),$(eval $(call TEST_GATEWAY,$(gateway))))
39
+ $(foreach gateway,$(GATEWAY_IDS),$(eval $(call RUN_GATEWAY,$(gateway))))
40
+ $(foreach gateway,$(GATEWAY_IDS),$(eval $(call TEST_SUITE_GATEWAY,$(gateway))))
41
+
42
+ # Run the tests for all gateways
43
+ test-all: $(addprefix test-,$(GATEWAY_IDS)) summary
44
+
45
+ # Update the report
46
+ summary:
47
+ npm run summary
package/package.json ADDED
@@ -0,0 +1,89 @@
1
+ {
2
+ "name": "@graphql-hive/federation-gateway-audit",
3
+ "version": "0.0.0",
4
+ "description": "Audit tool for Apollo Federation Gateway",
5
+ "repository": {
6
+ "type": "git",
7
+ "url": "git+https://github.com/graphql-hive/federation-gateway-audit.git"
8
+ },
9
+ "homepage": "https://the-guild.dev/graphql/hive/federation-gateway-audit",
10
+ "author": {
11
+ "email": "contact@the-guild.dev",
12
+ "name": "The Guild",
13
+ "url": "https://the-guild.dev"
14
+ },
15
+ "license": "MIT",
16
+ "bin": {
17
+ "graphql-federation-audit": "dist/cli.js"
18
+ },
19
+ "type": "module",
20
+ "main": "./dist/index.cjs",
21
+ "module": "./dist/index.mjs",
22
+ "types": "./dist/index.d.cts",
23
+ "exports": {
24
+ ".": {
25
+ "import": {
26
+ "types": "./dist/index.d.ts",
27
+ "default": "./dist/index.js"
28
+ },
29
+ "default": {
30
+ "types": "./dist/index.d.ts",
31
+ "default": "./dist/index.js"
32
+ }
33
+ },
34
+ "./package.json": "./package.json"
35
+ },
36
+ "publishConfig": {
37
+ "access": "public"
38
+ },
39
+ "sideEffects": false,
40
+ "scripts": {
41
+ "start": "tsx ./src/cli.ts",
42
+ "summary": "tsx ./src/summary.ts",
43
+ "build": "pkgroll",
44
+ "typecheck": "tsc --noEmit",
45
+ "format": "prettier --write ."
46
+ },
47
+ "dependencies": {
48
+ "@apollo/composition": "2.13.1",
49
+ "@apollo/subgraph": "2.13.1",
50
+ "async-retry": "1.3.3",
51
+ "fets": "0.8.5",
52
+ "get-port": "7.1.0",
53
+ "graphql": "16.13.1",
54
+ "graphql-yoga": "5.18.1",
55
+ "jest-diff": "30.3.0",
56
+ "kill-port-process": "4.0.2",
57
+ "wait-on": "9.0.4",
58
+ "detect-port": "2.1.0",
59
+ "yargs": "18.0.0"
60
+ },
61
+ "devDependencies": {
62
+ "@apollo/gateway": "2.13.1",
63
+ "@apollo/server": "5.4.0",
64
+ "@changesets/changelog-github": "0.6.0",
65
+ "@changesets/cli": "2.30.0",
66
+ "@graphql-hive/gateway": "2.5.5",
67
+ "@graphql-hive/router-runtime": "1.1.15",
68
+ "@as-integrations/express5": "1.1.2",
69
+ "@types/async-retry": "1.4.9",
70
+ "@types/express": "5.0.6",
71
+ "@types/node": "24.12.0",
72
+ "@types/wait-on": "5.3.4",
73
+ "@types/yargs": "17.0.35",
74
+ "express": "5.2.1",
75
+ "prettier": "3.8.1",
76
+ "pkgroll": "2.27.0",
77
+ "tsx": "4.21.0",
78
+ "typescript": "5.9.3",
79
+ "wgc": "0.109.0"
80
+ },
81
+ "overrides": {
82
+ "cross-spawn": "7.0.6",
83
+ "graphql": "16.13.1",
84
+ "js-yaml": "4.1.1",
85
+ "tmp": "0.2.5",
86
+ "@modelcontextprotocol/sdk": "1.27.1"
87
+ },
88
+ "packageManager": "npm@11.11.0"
89
+ }